[Bug 23140] Further Boundary Checking is Necessary on Slice Calls

https://www.w3.org/Bugs/Public/show_bug.cgi?id=23140

--- Comment #2 from Arun <arun@mozilla.com> ---
Clarification: the spec already disallows end > size and the equivalent for
start.  This bug is to add [Clamp] to the IDL to ensure that a call of the sort

slice(0, Number.MAX_SIZE) 

ends up being equivalent to

slice(0, thisBlob.size)

-- 
You are receiving this mail because:
You are the QA Contact for the bug.

Received on Tuesday, 3 September 2013 16:35:24 UTC